$ rpki-client -vvf rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft File: Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft (raw, json) Hash identifier: 5mCOoJEbYPu4Agca68SvikQ/MrOHehrBZk144cUl6nE= Subject key identifier: E2:D1:38:4B:C1:2B:3B:09:C7:6E:5D:13:6D:D9:6B:05:48:92:B7:8B Authority key identifier: 1A:D9:BD:9D:C7:73:15:BD:10:2D:AF:5A:A9:F9:25:66:B2:C2:FB:99 Certificate issuer: /CN=A914FC2C/serialNumber=1AD9BD9DC77315BD102DAF5AA9F92566B2C2FB99 Certificate serial: 0328 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gtm9ncdzFb0QLa9aqfklZrLC-5k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft Manifest number: 0318 Signing time: Sat 29 Mar 2025 01:26:32 +0000 Manifest this update: Sat 29 Mar 2025 01:26:32 +0000 Manifest next update: Sat 05 Apr 2025 01:26:32 +0000 Files and hashes: 1: Gtm9ncdzFb0QLa9aqfklZrLC-5k.crl (hash: nzcXt3ODLDOjEEMAAgzI4IbOu8IAyl3lYweBUsnmJWc=) 2: F6542C72C53511ECA64F3010C4F9AE02.roa (hash: Wt9pMWKxr+daOi/B9m/xRaP82vVhCrzp4mOJhmuxsCo=) 3: 6E32028AD48511EF8239D526C4F9AE02.roa (hash: 1FKfaiAJeg1yycd3T4a6djGkQtCSWEzT9oC8tI8DGPI=) 4: F6D63384C53511ECA64F3010C4F9AE02.roa (hash: wAinW3EzbrBxNVmPBx/cE+ByR4TusgaQNiUtZIMngpw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.crl rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gtm9ncdzFb0QLa9aqfklZrLC-5k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 01:26:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 808 (0x328) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914FC2C Validity Not Before: Mar 29 01:26:32 2025 GMT Not After : Apr 5 01:26:32 2025 GMT Subject: CN=67e74c48-45b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:cd:58:98:58:74:40:6f:25:08:22:2e:34:05: 09:29:41:2c:f5:35:5f:45:dd:87:4f:9b:73:ac:5f: 3a:6b:b7:0c:33:0b:eb:1b:ab:ea:d4:dc:b0:4d:b8: 25:d9:90:13:0d:f6:3c:06:fc:17:75:bf:a6:b1:53: aa:b2:55:80:01:97:36:8a:45:71:6d:aa:00:96:53: 47:2b:46:fd:4f:ee:1e:f8:e2:1b:76:88:ce:f9:11: 17:e9:d2:cc:96:98:08:de:9d:b0:cb:78:a7:38:50: 0f:f5:8c:21:74:a0:21:8f:54:71:b4:b5:42:30:0d: 99:ec:78:ba:dd:e4:55:9d:78:61:e9:00:8b:c3:87: e0:9c:6c:97:63:1a:ca:e8:a8:66:dd:78:fe:66:20: 54:59:44:11:af:aa:6e:be:60:fc:14:42:90:74:20: c3:32:d8:2d:5f:fc:c5:cb:54:9b:9d:db:2a:18:a1: 89:b0:7a:43:cc:33:fa:c0:94:68:44:1a:bb:f4:ed: 1a:94:19:bd:be:74:c1:ef:fc:aa:b9:27:7b:a6:d4: 4b:24:bf:82:53:eb:06:83:04:b3:19:3d:ae:97:53: 61:dc:d3:f0:ca:83:35:3b:43:06:2c:0d:58:21:c8: d3:90:0e:62:11:84:61:e4:ba:76:8d:db:99:96:47: db:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:D1:38:4B:C1:2B:3B:09:C7:6E:5D:13:6D:D9:6B:05:48:92:B7:8B X509v3 Authority Key Identifier: keyid:1A:D9:BD:9D:C7:73:15:BD:10:2D:AF:5A:A9:F9:25:66:B2:C2:FB:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gtm9ncdzFb0QLa9aqfklZrLC-5k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:ed:52:78:1f:ee:49:8b:9c:7d:65:06:40:1f:22:19:80:91: 42:97:66:8c:08:20:42:22:d1:38:1d:3d:2b:bd:d8:b4:a3:05: 7a:89:d4:97:7d:e3:39:94:a5:47:e5:f0:be:01:b0:8e:5a:10: df:e0:61:55:b2:8f:b4:31:08:1a:4d:99:02:41:ae:77:64:20: af:ee:47:28:d2:31:57:c1:2c:64:99:20:74:34:77:4c:41:b6: 54:0e:08:3b:88:78:a0:ca:4a:4e:af:73:e0:cd:4b:91:d3:ad: dd:55:20:b2:26:28:c3:16:b4:c1:27:bc:af:7b:6d:2b:7c:71: 36:e8:db:da:cb:19:9e:48:d5:69:77:33:dd:f9:27:8a:e2:6a: 8c:77:04:05:4a:12:a8:85:c9:82:16:90:1e:60:a5:26:51:9b: de:b4:43:96:a1:15:cf:2b:4e:51:30:de:37:7a:4a:3b:91:08: 97:43:c4:df:6d:dc:57:a8:ae:7e:35:b5:38:8b:28:bf:c0:50: 7c:c5:47:50:6c:de:95:7e:f5:03:3e:61:5b:6b:08:71:78:fc: ee:fd:54:09:7e:e7:a0:ca:a6:ec:ea:aa:d5:23:58:4b:9e:1e: 61:ca:34:df:be:a5:be:e6:1e:4f:e8:8e:dd:35:70:9f:7b:47: 89:48:db:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAygwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEZDMkMxMTAvBgNVBAUTKDFBRDlCRDlEQzc3MzE1QkQxMDJEQUY1QUE5RjkyNTY2 QjJDMkZCOTkwHhcNMjUwMzI5MDEyNjMyWhcNMjUwNDA1MDEyNjMyWjAYMRYwFAYD VQQDEw02N2U3NGM0OC00NWI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwM1YmFh0QG8lCCIuNAUJKUEs9TVfRd2HT5tzrF86a7cMMwvrG6vq1NywTbgl 2ZATDfY8BvwXdb+msVOqslWAAZc2ikVxbaoAllNHK0b9T+4e+OIbdojO+REX6dLM lpgI3p2wy3inOFAP9YwhdKAhj1RxtLVCMA2Z7Hi63eRVnXhh6QCLw4fgnGyXYxrK 6Khm3Xj+ZiBUWUQRr6puvmD8FEKQdCDDMtgtX/zFy1SbndsqGKGJsHpDzDP6wJRo RBq79O0alBm9vnTB7/yquSd7ptRLJL+CU+sGgwSzGT2ul1Nh3NPwyoM1O0MGLA1Y IcjTkA5iEYRh5Lp2jduZlkfbLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOLROEvB KzsJx25dE23ZawVIkreLMB8GA1UdIwQYMBaAFBrZvZ3HcxW9EC2vWqn5JWaywvuZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RkMyQy9CMDRFOTE5Q0M1 MzMxMUVDOTZERjMxMEZDNEY5QUUwMi9HdG05bmNkekZiMFFMYTlhcWZrbFpyTEMt NWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d0bTluY2R6RmIwUUxhOWFxZmtsWnJMQy01ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RkMyQy9CMDRFOTE5Q0M1MzMxMUVDOTZERjMxMEZDNEY5QUUwMi9HdG05bmNkekZi MFFMYTlhcWZrbFpyTEMtNWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBS7VJ4H+5Ji5x9ZQZAHyIZgJFCl2aMCCBCItE4HT0rvdi0owV6idSX feM5lKVH5fC+AbCOWhDf4GFVso+0MQgaTZkCQa53ZCCv7kco0jFXwSxkmSB0NHdM QbZUDgg7iHigykpOr3PgzUuR063dVSCyJijDFrTBJ7yve20rfHE26NvayxmeSNVp dzPd+SeK4mqMdwQFShKohcmCFpAeYKUmUZvetEOWoRXPK05RMN43eko7kQiXQ8Tf bdxXqK5+NbU4iyi/wFB8xUdQbN6VfvUDPmFbawhxePzu/VQJfuegyqbs6qrVI1hL nh5hyjTfvqW+5h5P6I7dNXCfe0eJSNsn -----END CERTIFICATE-----Generated at Fri Apr 4 22:04:33 2025 by rpki-client